Update code in endpoints/logout.post.py
This commit is contained in:
parent
1b6c7c7ee9
commit
19901ea6b5
@ -1,24 +1,24 @@
|
|||||||
from fastapi import APIRouter, Depends, HTTPException
|
from fastapi import APIRouter, Depends, HTTPException
|
||||||
from core.database import fake_users_db
|
from core.database import fake_users_db
|
||||||
from core.auth import get_current_user
|
|
||||||
|
|
||||||
router = APIRouter()
|
router = APIRouter()
|
||||||
|
|
||||||
@router.post("/logout")
|
@router.post("/logout")
|
||||||
async def logout_handler(
|
async def logout_handler(
|
||||||
current_user: dict = Depends(get_current_user)
|
token: str = Depends(oauth2_scheme),
|
||||||
|
db: Session = Depends(get_db)
|
||||||
):
|
):
|
||||||
"""Demo logout endpoint"""
|
"""Demo logout endpoint"""
|
||||||
if current_user["username"] not in fake_users_db:
|
user = get_user_from_token(token, db)
|
||||||
raise HTTPException(status_code=400, detail="Invalid user")
|
if not user:
|
||||||
|
raise HTTPException(status_code=401, detail="Invalid authentication credentials")
|
||||||
|
|
||||||
fake_users_db[current_user["username"]]["disabled"] = True
|
# Invalidate token or remove user session
|
||||||
|
invalidate_token(token)
|
||||||
|
|
||||||
return {
|
return {
|
||||||
"message": "Logout successful",
|
"message": "Logout successful",
|
||||||
"user": current_user["username"],
|
|
||||||
"next_steps": [
|
"next_steps": [
|
||||||
"Clear session data",
|
"Redirect to login page"
|
||||||
"Revoke access token"
|
|
||||||
]
|
]
|
||||||
}
|
}
|
Loading…
x
Reference in New Issue
Block a user